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QUESTION: 55 
What is a key business value of zSecure for enhanced administration? 


A. Intuitive administrative user interface. 

B. Easy implementation and stable execution. 

C. Offline RACF change management to test changes before moving toproduction. 
D. Robust database of threat exposures. 


Answer: B 


QUESTION: 56 
Which of the following actions can be taken with Tivoli Endpoint Manager for 
Mobile Device Manager? 


A. Power Management. 
B. Patch distribution. 
C. Disable iCloud sync. 
D. All of the above. 


Answer: B 


QUESTION: 57 
Once IBM Security Virtual Server Protection (VSP) for VMware is deployed, is there 
still need for other security solutions in the virtualized servers? 


A. Yes there is because VSP cannot monitor host-based events (e.g. file integrity). 
B. Yes there is because VSP does not monitor all traffic in the hypervisor. 

C. No there is not because VSP does monitor all traffic in the hypervisor. 

D. No there is not because VSP offers several layers of security. 


Answer: D 


QUESTION: 58 
Which of the following best describes QRadar Network Anomaly Detection 
(QNAD)? 


A. QNAD is a stand-alone appliance that allows the identification of anomalies on the 
network. 
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B. QNAD feeds information about the network traffic to Site Protector. 

C. QNAD is an optimized version of QRadar which complements SiteProtector to 
optimize network protection. 

D. QNAD identifies anomalies out of the information it imports from SiteProtector. 


Answer: C 


Reference: 
http://www.slideshare.net/IBMDK/pcty-2012-threat-landscape-and-security- 
intelligence-v-michael-andersson (slide 38) 


QUESTION: 59 
Which one of the following describes the benefit of the “Monitor Database Activity” 
phase of the IBM’s Holistic Approach to Data Security and Compliance? 


A. Automate detection of sensitive data and enterprise data relationships. 

B. Provide essential safeguards to protect high value databases across heterogeneous 
environments. 

C. Manage and enforce privileges enterprise-wide. 

D. All of the above. 


Answer: B 


QUESTION: 60 
Which one of the following statements about Database Activity Monitoring Solutions 
is true? 


A. Home-grown Database Activity Monitoring solutions are costly and ineffective. 

B. Home-grown Database Activity Monitoring solutions are cost effective. 

C. Home-grown Database Activity Monitoring solutions make compliance reporting 
easy. 

D. Database Activity Monitoring solutions are costly and ineffective. 


Answer: A 


QUESTION: 61 
Which of the following is a good opportunity for selling TFIM to an existing TAMeb 
customer? 
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A. The TAMeb customer is growing more interested in enterprise audit log 
management. 

B. The TAMeb customer wants to extend access to SaaS and Cloud applications, or 
they are planning on extending their Web SSO/access infrastructure to include partner 
accesses. 
C. The TAMeb customer is going to include Oracle applications in their operational 
environment in the coming year. 

D. The TAMeb customer is going to include access to mainframe applications in the 
coming year. 


Answer: B 


QUESTION: 62 
Which of the following best describes how does next generation IPS XGS series 
enhance network IPS policies? 


A. By coupling IBM Security Network IPS with granular Application Control. 

B. By coupling IBM Security Network IPS with granular Application Control and 
awareness of Applications and Identity. 

C. By coupling IBM Security Network IPS with awareness of Applications and 
Identity. 

D. By coupling IBM Security Network IPS with granular Application Control and 
awareness of Applications. 


Answer: D 


QUESTION: 63 
A client has deployed Tripwire on a portion of their infrastructure where PII data is 
located. What is a comparable solution from IBM Security? 


A. IBM Security SiteProtector. 
B. IBM Security Server. 

C. IBM Security Desktop. 

D. Enterprise Scanner. 


Answer: A 


QUESTION: 64 
Which of the following statements about IBM Security Management SiteProtector is 
true? 
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A. Excellent at managing IBM Security appliances and technology but cannot 
manage third party devices. 

B. Includes a policy deployment option to help you quickly extend and apply policies 
to one device at a time. 

C. Offers a scalable solution designed to help you control, monitor, analyze, and 
report on your enterprise security posture through multiple consoles. 

D. Reduces the costs and complexity of security management through central control 
of diverse network and host security devices. 


Answer: B 


Reference: 
http://www-935.ibm.com/services/at/gts/pdf/sed03044usen.pdf (page 2, 6th bullet on 
the page) 


QUESTION: 65 
What is the other main capability offered by Tivoli Federated Identity Manager, 
besides federated (cross-domain) single sign-on? 


A. Identity propagation and consistent auditing in portal, Service-Oriented 
Architecture or Web Services scenarios. 

B. Provisioning of user identities for more than the single domain use case. 

C. The ability to bring users from multiple domains into a single domain, with a “one 
push button” approach. 

D. Federated single sign-off. 


Answer: D 
Reference: 


http://www-01.ibm.com/software/tivoli/products/federated-identity-mgr- 
bg/features.html (see benefits, for the IT executive, 4th bullet) 
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